Vulnerabilities on 35.0.1

[Samantha Lua]

Hi Druid community,

We ran vulnerabilities scan on 35.0.1 and found below. Do you know of any plans to fix these vulnerabilities?

Thanks,
Sam

 

 

HIGH  org.ini4j:ini4j  0.5.4    No fixed version at this time
HIGH  org.lz4:lz4-java  1.8.1  No fixed version at this time  
HIGH  org.lz4:lz4-java  1.8.1  No fixed version at this time
HIGH  org.lz4:lz4-java  1.8.1  No fixed version at this time
HIGH  org.lz4:lz4-java  1.8.1  No fixed version at this time
HIGH  org.lz4:lz4-java  1.8.1  No fixed version at this time
HIGH  org.ini4j:ini4j  0.5.4    No fixed version at this time
HIGH  org.lz4:lz4-java  1.8.1  No fixed version at this time
HIGH  org.lz4:lz4-java  1.8.1  No fixed version at this time
HIGH  lodash.template  4.5.0    No fixed version at this time
MEDIUM  commons-lang:commons-lang  2.6  No fixed version at this time
MEDIUM  commons-lang:commons-lang  2.6  No fixed version at this time
MEDIUM  commons-lang:commons-lang  2.6  No fixed version at this time
MEDIUM  commons-lang:commons-lang  2.6  No fixed version at this time
MEDIUM  commons-lang:commons-lang  2.6  No fixed version at this time
MEDIUM  commons-lang:commons-lang  2.6  No fixed version at this time
MEDIUM  commons-lang:commons-lang  2.6  No fixed version at this time
MEDIUM  request  2.88.2  No fixed version at this time

[Samantha Lua]

Correction: version 34 vulnerabilities, not version 35 thanks